if $programname == 'etcd' then {
   action(type="omfile" file="/var/log/etcd/etcd.log")
}